Skip to main content

NAS Overview

Overview​

A NAS (Network Access Server) is the router or gateway that your subscribers connect through — for example a MikroTik router. When a subscriber tries to get online, the NAS asks Netzur IMBS "is this customer allowed, and what speed and limits do they get?" using a protocol called RADIUS. Netzur answers, and the NAS lets the customer online with the right plan.

The NAS page is where you register each of these devices so Netzur can authenticate and manage the subscribers on them.

Every NAS you add needs a Shared Secret — a password that the router and Netzur use to trust each other — and a CoA-Port, which lets Netzur send live instructions (like disconnecting a session) to the router.

Who Can Use This Feature​

Network administrators and engineers who set up and maintain the ISP's routers.

Required Permissions​

  • NAS → List to view the NAS page.
  • NAS → Add / Update / Delete to create, edit or remove a NAS.
  • NAS → Mikrotik / Hotspot for the MikroTik-specific and hotspot options.

Prerequisites​

  • The router is installed and reachable on the network.
  • You know the router's IP address, the NAS type (brand/model family), and can set a shared secret on it.

Networking → NAS

The NAS list with columns for IP address, name, secret, type, CoA-port, TTL, status and online subscribers

The NAS list​

The NAS page lists every registered device with these columns:

ColumnMeaning
#The internal reference number of the NAS.
IP AddressThe management IP address of the router.
Short NameA friendly name you give the NAS.
SecretThe shared secret, hidden by default. Select View to reveal it.
Nas TypeThe device family (Mikrotik, Cisco, Netvyn, Other, etc.).
Coa-PortThe port used to send live "change/disconnect" instructions.
TTLPing time-to-live used for the reachability check.
StatusLive reachability: OK (…ms), Unreachable, or Disabled.
Online SubscribersHow many subscribers are currently online through this NAS.

Above the list you can Add NAS, Export the list, choose Columns, Filter, Search, and change how many rows show per page.

Actions available on each NAS​

  • Add NAS — register a new device (see Add a NAS).
  • Edit — change a NAS's settings.
  • View (Secret) — reveal the shared secret for that NAS.
  • Statistics — live device stats (uptime, CPU, memory, interface traffic) for supported devices.
  • Audit — the history of changes to that NAS.
  • Hotspot — for hotspot devices, configure captive-portal self-registration (see Hotspot Configuration).
  • Delete — remove the NAS.

Important Notes​

  • The shared secret must match exactly on both the router and in Netzur, or subscribers on that NAS cannot authenticate.
  • Status is a live check — Unreachable means Netzur cannot reach the router right now (network/firewall/credentials), not necessarily that customers are offline.
  • ⚠ Saving a NAS restarts the RADIUS service so the change takes effect. Plan changes for quiet periods where possible.

Common Mistakes​

  • Typing the shared secret differently on the router and in Netzur.
  • Using the wrong NAS type, which can change how sessions are handled.
  • Blocking the CoA-Port on a firewall, which stops live disconnect/suspend from working.

Troubleshooting​

ProblemLikely causeWhat to do
Status shows UnreachableRouter offline, firewall, or wrong IPConfirm the router is up and reachable; check the IP and any firewall rules.
Subscribers on a NAS can't authenticateShared secret mismatchRe-enter the same secret on the router and in Netzur.
Disconnect/suspend doesn't take effectCoA-Port blocked or wrongConfirm the CoA-Port is open and matches the router.